PT-2026-47720

CVE-2026-49818

Published

2026-06-09

Updated

2026-06-12

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions apache-airflow-providers-samba versions prior to 4.12.6

Description The GCSToSambaOperator in the Apache Airflow Samba provider fails to perform a containment check when joining GCS object names to the SMB destination path. This allows an attacker who can write objects into the source GCS bucket to use ../ segments in object names to resolve a write path outside the configured destination path, enabling the writing of files to arbitrary locations on the Samba target.

Recommendations Upgrade apache-airflow-providers-samba to version 4.12.6 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Jarek Potiuk

Secuholic

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')